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A method for securely delivering content over a network composing the steps of: 

(a) storing at least one title on a content server operatives coupled to the 
network, the title stored in unexecutable form; / 

(b) storing on an access server operatively coupled to/the network a location 
identifier of the title and data necessary to process the title into executable 
form; / 

(c) requiring a client process operatively coupled/to the network to obtain the 
location identifier of the title from the access/server prior to retrieving at 
least a portion of the title from the content Server; and 

(d) requiring a client process to obtain from tne access server the data 
necessary to process the portion of the/title into executable form. 

The method of claim 1 further comprising tne step of: 

(e) requiring the client process to obtsnn the signature of the access server 
and to present the signature to tbfe content server before retrieving at least 
a portion of the title from the ccmtent server. 

The method of claim 1 further comprising the step of: 

(e) requiring the client process to obtain from the access server time data 
defining a time period in/which the client process may retrieve at least a 
portion of the title fronVthe content server. 

The method of claim 3 furtner comprising the step of: 

(f) requiring the clienft process to obtain new time data from the access server 
once the time period has expired and before retrieving at least a portion of 
the title from me content server. 

The method of clpri 1 further comprising the step of: 
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(e) requiring the client process to obtain new time datagram the access server 
once the time period has expired and before reprieving at least a portion of 
the title from the content server. / / 
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An apparatus for secure delivery of over a/letwork comprising: 

(a) a content server operatively coupleaio the network and having at least one 
title stored therein unexecutable / rorTi; 

(b) an access server operativejycoupkd to the network and having stored 
therein a location identifier of the tit e and data necessary to process the title 
into executable forrpf and 

(c) a client system ^eratively coupled to the network and containing program 
logic configured to obtain from the (access server the location identifier of the 
title and/tne data necessary to profess the portion of the title into executable 
forr 



1 7. The apparatus of claim 6 wherein the client system further comprises: 

2 program logic configured to execute portion of the title. 



1 8. The apparatus of claim 6 wherein the" access server further comprises: 

2 program logic configured to generate time data defining a time period in which 

3 the client system may retrieve at least a portion of the title from the content server. 
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9. The apparatus of claim 8 wherein the client system further comprises: 

program logic configured to requestlnew time data from the access server once 
the time period has expired. 



1 1 0. The apparatus of claim 6 wh 

2 network. 
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3rein the network comprises a broadband access 



1 1 . Apparatus for secure delivery of content over a networt^comprising: 

(A) a content server comprising a processor, a memory and a network 
interface for operatively coupling the content serve/to the network, the content 
server further comprising: I 

(A.1) authentication logic, responsive to a token received from a 
client process, the token containing data identifying a time period and 
configured to determine whether the cjient process is authorized to access 
the memory at a specif c time; and 

(A.2) access logic, responsfve to the token received from the client 
process, the token containing data uniquely identifying one of the titles 
stored in the memory, for enabli/fg access to the memory and the title 
uniquely identified by the toker 

(B) an access server comprising a processor, a memory and a network 
interface for operatively coupling tpe access server to the network, the access 
server further comprising: 

(B.1 ) conversion/logic, responsive to a unique identifier of a title 
supplied by a client process and configured to convert the unique identifier 
of the title into a location identifier indicating an address on the network 
where the title may be accessed; and 

(B.2) activator generation logic responsive to a request from a 
client process arp configured to generate an activator in response thereto; 
and 

(C) a clien^system comprising a processor, a memory and a network 
interface for operatively coupling the client system to the content server and the 
access server over the network, the client system further comprising: 
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(C.1 ) program logic configured to obtain from the access server a 
token, an activator and a locatiDn identifier of the content server at which an 
identified title can be accessed; 

(C.2) program log if/configured to retrieve at least a portion of the 

a 

ld>gic configured to execute the portion of the title 



title from the content server; a 
(C.3) progra 



operating system executable on the 
comprises: 

(C.4) program 
associated with the identified 



retrieved from the conten/server. 



1 2. The apparatus of claim 1 1 wh< *rein the client system further comprises an 



plurality of registry entries related to the title; 



(C.5) program 
operating system during title 
request to the set of registry 



)rocessor and wherein the client system further 

ogic configured to mount a network file system 
itle and store in the memory of the client system, a 



ogic configured to intercept requests from the 
execution and redirect selected of the intercepted 
ontries. 



1 1 3. The apparatus of claim 1 1 wherein the activator comprises cryptographic data. 



14. The apparatus of claim 1 1 wfierein the activator comprises at least one bytecode 
and the client system further corjnprises: 
(C.4) program 
bytecode contained within th|e 



logic configured to interpret and execute the 
activator. 



1 15. The apparatus of claim 14 wherein the token comprises data identifying the 

2 access server which generated the token. 
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1 16. The apparatus onclaim 1 1 wherein the activator further comprises authorization 

2 data. \ 

1 17. The apparatus of claim 1 1 wherein the token further comprises: 

2 start time data and end time data which collectively define a time period. 

1 18. The apparatus of claim 1 1 wherein the title is stored in the memory of the content 

2 server in the form of a briq. I 

1 19. The apparatus of claim 1 1 wherein the briq comprises at least one file containing 

2 data comprising at least a portion of a title. 

3 V 

4 20. The apparatus of claim \ 1 wherein the network comprises a broadband access 

5 network. \ 
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